Forum registration security

Get help using the forum here
Post Reply
User avatar
rbryce1
Corvette Addict
Corvette Addict
Posts: 1210
Joined: Apr 8th, 2010 4:35 pm
Tell us about your Corvette: 2001 Targa Top Coupe, Stock 350/350 hp Automatic,
1968 Full Custom Mako Shark Convertible, 454/425 hp, Muncie M20 Transmission. 1965 HP Resto-Mod Coupe, 350/390 hp, Kiesler 5-Speed, FiTech FI, Hedman headers, Edelbrock heads, Comp Cam.
Location: Pinellas Park, Florida

Forum registration security

Post by rbryce1 »

Tim: I am the ADMIN for our Corvette Club's forum, and, due to span registrations, I have had to actually make it mandatory that I approve all new registrations. There is either new software or people so darn persistant that they are taking the time to register and log onto forums which are even using the random coding security. I delete about 10-15 bogus entries per day. It doesn't even work to block their IP, because they have access to hundreds of IP addresses. If you find a good way to stop this, please let me know. I am also using phpBB for a forum program.
User avatar
MaineVette
Administrator
Administrator
Posts: 2171
Joined: Sep 7th, 2009 5:31 pm
Tell us about your Corvette: 1971 Coupe, restoration in progress.
Location: Waterboro, Maine

Re: Forum registration security

Post by MaineVette »

I know what you mean. Foturnately I haven't had too many issues with spammers yet. But, as the membership of this forum grows, I suspect it will become more and more of an issue.

I don't think you'll ever be able to fully address the people who manually go through the effort of entering the captcha code and then following through with the activation e-mail. However, for me those measures have been very successful in stopping the automated bots. In the past year or so this forum has been up I've only had to ban about a dozen accounts which I don't think is too bad.

If it helps, here's a summary of my current setup as it pertains to account setup:

Running phpBB v.3.07-PL1 (I know, due for an update)

Under user registration settings:
Account actiation: By user
E-mail address re-use: not allowed
Enable visual confirmation for registrations: yes
Registration attempts: 5
Enable COPPA: No

Under visual confirmation settings
Enable visual confirmation for registrations: Enabled
Enable visual confirmation for guest postings: Enabled
Enable users to refresh the confirmation image: Enabled
GD CAPTCHA: YEs
GD CAPTCHA foreground noise:No
GD CAPTCHA background noise x-axis: 20
GD CAPTCHA background noise y-axis: 20
GD CAPTCHA wave distortion: No
Add 3D-noise objects: No
Use different fonts: New Shapes

What's the forum address and which version of phpBB are you running? If you wan't I can create any account and provide you with my thoughts.
Someday I'll finally be able to drive my Vette, but for now I'll just admire all the pieces... :willy:

Track my progress at The Corvette Restoration Page http://www.corvette-restoration.com
User avatar
nwav8tor
Corvette Addict
Corvette Addict
Posts: 607
Joined: Nov 16th, 2009 1:38 am
Tell us about your Corvette: 1971 Coupe that's been in the family since new. Was "stored" in a shed in New England for 22 years. Even though I have limited knowledge and experience, I'm SLOWLY doing a body off restoration. Standby for many questions!
Location: Spokane, WA

Re: Forum registration security

Post by nwav8tor »

A sad commentary on today's state of affairs regarding spammers...

Here are you guys trying to help fellow vette lovers out and you have to jump through all those hoops just trying to keep trash off your forums.

Thanks ever so much for all your trouble!

Paul
User avatar
rbryce1
Corvette Addict
Corvette Addict
Posts: 1210
Joined: Apr 8th, 2010 4:35 pm
Tell us about your Corvette: 2001 Targa Top Coupe, Stock 350/350 hp Automatic,
1968 Full Custom Mako Shark Convertible, 454/425 hp, Muncie M20 Transmission. 1965 HP Resto-Mod Coupe, 350/390 hp, Kiesler 5-Speed, FiTech FI, Hedman headers, Edelbrock heads, Comp Cam.
Location: Pinellas Park, Florida

Re: Forum registration security

Post by rbryce1 »

My forum is actually a little more restrictive than yours. I have also added custom fields that normally only peiople who understand corvettes can fill out intelligently, and this has worked very well in identifying real corvette people vs. spammers. When I ask for your Corvette Club name (or enter none) and i get an entry like JDIIEEE, my guess it is either not a valid club or it is one who's members I really don't want on the forum anyway. It has made identifying the real useres and the spammers easier, but still requires monitoring and deleting.

But it is worth it.
Post Reply